Static task
static1
Behavioral task
behavioral1
Sample
6bf26563a10a3c50f02a6e0a32fcb6f778f9d7920d610809b07fe4cc85278d9d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6bf26563a10a3c50f02a6e0a32fcb6f778f9d7920d610809b07fe4cc85278d9d.exe
Resource
win10v2004-20230703-en
General
-
Target
6bf26563a10a3c50f02a6e0a32fcb6f778f9d7920d610809b07fe4cc85278d9d
-
Size
597KB
-
MD5
65a77db601bd340508fbdaa060a639cf
-
SHA1
d711bc4e6ebfe8ab2ca4048de3973e33b366c458
-
SHA256
6bf26563a10a3c50f02a6e0a32fcb6f778f9d7920d610809b07fe4cc85278d9d
-
SHA512
1b1686dda34961c84a82bdf6fa6b7479a045bf639705b1a5b1c0a4df71458ea456d8c7c27fcedc7b8480d729a2b1badedfcbfacc4a13e19da5957d0372f1ff7a
-
SSDEEP
12288:/0Dl+C42xjWwXJxizbedi2GkjIRMBJyCFbrLvuLyj1JXcU7fr:QZ3iP5kjQg55rroM1Z7f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bf26563a10a3c50f02a6e0a32fcb6f778f9d7920d610809b07fe4cc85278d9d
Files
-
6bf26563a10a3c50f02a6e0a32fcb6f778f9d7920d610809b07fe4cc85278d9d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 587KB - Virtual size: 587KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ